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WHAT IS CLAIMED IS 

1. A method for identification among at least 
first and second users communicating by means of a 
communication system, said method comprising the steps of: 

providing a first unique identifier from said 
first user to said second user; 

entering into an agreement between the various 
parties as to a first plurality of hash salts; 

at said second user, performing a hash operation 
on one of (a) said first unique identifier and (b) a 
ce termini^ t ic trans formation of sand first unique 
identifier, using the first salt from said plurality of 
salts, to thereby produce a first data hash (A) ; 

at said second user, performing a hash operation 
on at least a portion of said first data hash (A) using the 
second of said plurality of hash salts (B) , to thereby 
produce a second data hash (B) ; 

at said second user, performing a hash operation 
on at least a portion of said first data hash (A) using the 
third of said plurality of hash salts (C) , to thereby 
produce a third data hash (C) ; 

at said second user, performing a hash operation 
on at least a portion of said third data hash (C) using the 
fourth of said plurality of hash salts (D) , to thereby 
produce a fourth data hash (D) ; 

at said second user, discarding said third data 

hash (C) ; 

at said second user, performing a hash operation, 
using a further one of said plurality of hash salts (E) , on 
at least a portion of one of (a) said first unique 
identifier and (b) data deterministically derived from said 
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unique identifier, to thereby produce a fifth data hash (E) ; 

at said second user, generating a random number; 
at said second user, encrypting said random number 
with a key which includes at least a deterministic 
3 5 transformation of said second data hash, to produce an 

encrypted random number, where said transformation is agreed 
to ahead of time; 

at said first user, decrypting said encrypted 
random number using as a key using said at least a 
40 deterministic transformation of said second data hash, to 
extract said random number, to thereby form an extracted 
random number; 

at said first user, transmitting to said second 
user both said extracted random number and said third data 
45 hash; 

at said second user, performing a hash operation 
on said third data hash by the use of said fourth salt, to 
thereby generate a sixth data hash (F) ; 

at said second user, comparing said fourth and 
50 sixth data hashes, and deeming said message to be from said 
first user; and 

at said second user, discarding said third data 

hash. 

2. A method according to claim 1, further 
comprising, after said steps, at said second user, of (a) 
performing a hash operation on one of (a) said first unique 
identifier and (b) a deterministic transformation of said 
5 first unique identifier, using the first salt from said 

plurality of salts, to thereby produce a first data hash (A) 
and (b) performing a hash operation, using a further one of 
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said plurality of hash salts (E) , on at least a portion of 
one of (a) said first unique identifier and (b) data 
10 deterministically derived from said unique identifier, to 
thereby produce a fifth data hash (E) , the step of: 
discarding said first unique identifier. 

3 . A method for identification among at least 
first and second users communicating by means of a 
communication system, said method comprising the steps of: 
providing a first unique identifier from said 
3 first user to said second user, 

entering into an agreement between the various 
parties as to a first plurality of hash salts; 

at said second user, performing a hash operation 
on one of (a) said first unique identifier and (b) a 
10 deterministic transformation of said first unique 

identifier, using the first salt from said plurality of 
salts, to thereby produce a first data hash (A); 

at said second user, performing a hash operation 
on at least a portion of said first data hash (A) using the 
15 second of said plurality of hash salts (B) , to thereby 
produce a second data hash (B) ; 

at said second user, performing a hash operation 
on at least a portion of said first data hash (A) using the 
third of said plurality of hash salts (C) , to thereby 
2 0 produce a third data hash (C) ; 

at said second user, performing a hash operation 
on at least a portion of said third data hash (C) using the 
fourth of said plurality of hash salts (D) , to thereby 
produce a fourth data hash (D) ; 
25 at said second user, discarding said third data 
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hash (C) ; 

at said second user, performing a hash operation, 
using a fifth one of said plurality of hash salts (E) , on at 
least a portion of one of (a) said first unique identifier 

3 0 and (b) data deterministically derived from said unique 
identifier, to thereby produce a fifth data hash (E) ; 

at said second user, storing said second and 
fourth data hashes in memory at locations established by 
said fifth data hash; 

3 5 at said first user, performing a hash operation on 

at least a portion uf one of (a) said first unique 
identifier and (b) data deterministically derived from said 
unique identifier, using said fifth data hash, to thereby 
produce a replica of said fifth data hash; 

40 transmitting said replica of said fifth data hash 

from said first user to said second user; 

at said second user, accessing said memory at 
locations established by said replica of said fifth data 
hash to obtain said second and fourth data hashes; 

45 at said second user, generating a random number; 

at said second user, encrypting said random number 
with a key which includes one of (a) said second data hash 
and (b) a deterministic transformation of said second data 
hash, to produce an encrypted random number, where said 

50 transformation is agreed to ahead of time; 

at said first user, decrypting said encrypted 
random number using as a key using one of (a) said second 
data hash and (b) a deterministic transformation of said 
second data hash, to extract said random number, to thereby 

55 form an extracted random number; 

transmitting from said first user to said second 
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user both said extracted random number and said third data 
hash; 

at said second user, performing a hash operation 
60 on said third data hash by the use of said fourth salt, to 
thereby generate a sixth data hash (F) ; 

at said second user, comparing said fourth and 
sixth data hashes, and deeming said message to be from said 
first user if they are identical; and 
65 at said second user, discarding said third data 

hash. 

4. A method according to claim 3, further 
comprising, after said step of, at said second user, storing 
said second and fourth data hashes in memory at locations 
established by said fifth data hash, the step of: 

discarding said fifth data hash. 
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